Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier: Wvt26h3R0bPV0AXIm0OWiJI9BR+P9zPZY+0dvojNfFw=
Subject key identifier: 6D:16:CB:BA:23:3F:5C:4B:FE:C7:DF:68:EA:0C:9D:4B:69:DC:69:E0
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 019D981894A159D777F95A2781CF02B52B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number: 0BCC
Signing time: Thu 16 Apr 2026 21:00:40 +0000
Manifest this update: Thu 16 Apr 2026 21:00:40 +0000
Manifest next update: Fri 17 Apr 2026 21:00:40 +0000
Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: s5k3YlrTsNczMkt/QjB9GVocfr6ihsoDPvJW4IzU+ec=)
2: riD84npooDzOqhlvH7nf9Aj294A.roa (hash: O+rbEotKGudbvk9Gq/WMzzdZufBN90ky0PyB//XXeaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:94:a1:59:d7:77:f9:5a:27:81:cf:02:b5:2b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Apr 16 21:00:40 2026 GMT
Not After : Apr 17 21:00:40 2026 GMT
Subject: CN=6d16cbba233f5c4bfec7df68ea0c9d4b69dc69e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:af:c5:7f:83:77:c2:55:82:36:89:a1:3c:
ad:72:c6:83:14:ca:af:61:2a:04:32:ec:06:e1:54:
69:76:33:23:98:e4:3a:05:50:7d:64:37:ec:ea:08:
70:26:60:1e:a4:fc:c9:d7:75:ba:ae:b9:1e:52:68:
56:8d:c3:23:52:08:e9:31:ea:67:db:7a:15:3e:43:
48:3c:5c:84:78:52:49:0f:f3:62:6f:51:54:94:36:
d2:74:6f:c3:8f:4c:54:ec:f1:57:dd:d2:a7:d1:4c:
c4:b2:b3:08:21:b4:20:be:c6:19:cf:98:9d:4f:c7:
ba:83:56:8e:74:bb:51:71:c1:26:b3:6f:35:27:85:
1c:c8:53:40:3d:81:a6:bb:b2:9d:ea:c3:f3:ab:19:
98:79:43:03:8c:01:75:43:30:e9:6c:ec:a3:57:6b:
0d:12:e8:39:b9:ea:97:39:86:e8:fd:42:7d:0d:06:
07:44:bc:2d:c7:04:44:e8:bc:82:d5:3a:20:6b:40:
e6:a6:72:12:e6:39:cc:be:80:2f:31:79:89:6f:32:
86:77:2b:5a:dd:28:cb:51:9f:ff:86:65:37:69:97:
dd:48:d8:f7:38:05:d8:fb:05:1c:79:ff:9c:7c:61:
4f:e8:55:9f:e4:9d:4a:15:3c:72:90:68:47:29:5a:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:CB:BA:23:3F:5C:4B:FE:C7:DF:68:EA:0C:9D:4B:69:DC:69:E0
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:00:64:2a:7c:98:75:fb:31:be:3c:f6:18:c4:85:a5:03:31:
13:9a:c6:71:77:d2:41:b5:fd:a4:43:4c:64:b5:a2:25:9d:47:
f4:55:2d:98:f3:f9:d5:56:df:47:46:35:a5:10:33:24:6d:7b:
6d:56:51:81:ae:df:2c:cb:3a:d9:90:3a:7b:07:dd:ae:74:52:
31:c8:67:46:93:43:d4:fd:01:b1:18:d9:8c:64:b2:99:12:ec:
c0:7c:74:78:39:fd:66:70:bc:8d:ca:3c:31:57:cb:0f:b7:20:
51:f8:47:dd:96:8a:1c:6b:ee:85:ce:f7:a0:9f:17:d9:13:0b:
f1:20:92:08:3a:68:1c:e6:47:9c:d4:3b:c4:ed:95:11:a4:25:
5c:09:c8:5f:74:67:11:69:83:db:4f:2f:1d:c2:97:57:5e:53:
18:af:cc:76:76:85:65:0e:63:13:34:80:bb:1d:e9:a3:b6:6f:
54:97:cb:43:6c:ad:3b:41:f6:a2:eb:45:bd:ea:ef:ad:21:9c:
db:83:44:4f:e5:8b:40:eb:74:19:59:3c:6e:91:d6:75:8a:22:
6f:6d:95:fc:9e:97:36:81:1b:86:d0:69:c8:5c:01:20:6b:41:
bd:9c:13:f0:23:de:be:3a:f4:68:d9:59:24:9a:b4:88:f3:de:
70:27:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:25 2026 by rpki-client